Solves #4 by enabling HEAD as a working remote ref

Also has nicer wording wrt to SHA pinning